Trojan Horse: Automated Repository Poisoning against Coding Agents
Researchers introduce TrojanForge, described as the first automated framework for repository-level poisoning of coding agents, which uses AST analysis and adversarial refinement to hide malicious payloads. Tested against 384 poisoned repositories (TrojanBench) across 4 harnesses and 12 models, including commercial agents, the attack achieved over 60% poisoning success and over 90% backdoor injection, with even commercial agents failing to defend against it.